Postfix was working fine until my local telco switched my dynamic IP address to a different "prefix". When that happened I could no longer use the mail.mindspring.com server. I had to switch to the smtpauth.earthlinkk.net server. My Linux box was running Slackware 7 and an old version of postfix. I tried to fix postfix but could not get it to work. So I loaded Fedora 8 and the latest Postfix onto my laptop. Again I tried to configure postfix using the following:


relayhost = isp.mail.server
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/isppasswd
smtp_sasl_security_options =

isp.mail.server usernameassword

postmap /etc/postfix/isppasswd


There appears to be a problem with the authentication. I get the message "New domain not yet verified".

I was able to setup kmail to work and it is able to send and receive emails. I tcpdumped the traffic and postfix is not doing an authentication but kmail was doing authentication.

postconf -n

command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
debug_peer_list = smtpauth.earthlink.net
default_destination_concurrency_limit = 20
html_directory = no
local_destination_concurrency_limit = 2
mail_owner = postfix
mailq_path = /usr/bin/mailq
manpage_directory = /usr/local/man
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, mail.$mydomain, www.$mydomain, ftp.$mydomain
myhostname = XXXXX.com
myorigin = XXXXX
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = no
relayhost = [smtpauth.earthlink.net]
sample_directory = /etc/postfix
sendmail_path = /usr/sbin/sendmail
setgid_group = postdrop
smtp_sasl_auth_enable = yes
smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd
unknown_local_recipient_reject_code = 550


I have read all of the how-tos I could find and I tried to follow them but was not able to get it to work. Does anyone have a list of what I have to do to get this to work. I will start from scratch if that would be better.

Bob

You should show the actual log message.

Your domain, if new, may be subject to the "day old bread" blacklisting. This prevents newly registed domains from being use in spam hit-n-run operations. A new domain is registered, used as a source in spam, and then the spammer moves on.

Five days is considered new.

Since kmail does work I assume that it is a post fix problem. Also the log does not show an attempt to send the authentication information.

Here is the log:

22:24:01.844316 IP 192.168.0.9.33920 > smtpauth9.earthlink.net.smtp: S 4170340246:4170340246(0) win 5840 <mss 1460,sackOK,timestamp 33556185 0,nop,wscale 5>
E..<QO@.@...... .E........W....................
...........
22:24:01.946293 IP smtpauth9.earthlink.net.smtp > 192.168.0.9.33920: S 255975548:255975548(0) ack 4170340247 win 5792 <mss 1412,sackOK,timestamp 4128478292 33556185,nop,wscale 0>
E..<..@.1....E..... .....A.|..W................
...T........
22:24:01.946442 IP 192.168.0.9.33920 > smtpauth9.earthlink.net.smtp: . ack 1 win 183 <nop,nop,timestamp 33556287 4128478292>
E..4QP@.@...... .E........W..A.}...........
...?...T
22:24:02.050807 IP smtpauth9.earthlink.net.smtp > 192.168.0.9.33920: P 1:243(242) ack 1 win 5792 <nop,nop,timestamp 4128478303 33556287>
E..&t"@.1....E..... .....A.}..W............
..._...?220-elasmtp-curtail.atl.sa.earthlink.net ESMTP Exim 4.67 #1 Sat, 28 Jun 2008 01:26:32 -0400
220-NO UCE. EarthLink does not authorize the use of its computers or network
220 equipment to accept, transmit, or distribute unsolicited e-mail.

22:24:02.050974 IP 192.168.0.9.33920 > smtpauth9.earthlink.net.smtp: . ack 243 win 216 <nop,nop,timestamp 33556391 4128478303>
E..4QQ@.@...... .E........W..A.o...........
......._
22:24:02.051511 IP 192.168.0.9.33920 > smtpauth9.earthlink.net.smtp: P 1:22(21) ack 243 win 216 <nop,nop,timestamp 33556392 4128478303>
E..IQR@.@...... .E........W..A.o....N......
......._EHLO XXXXXX.com

22:24:02.154149 IP smtpauth9.earthlink.net.smtp > 192.168.0.9.33920: . ack 22 win 5792 <nop,nop,timestamp 4128478313 33556392>
E..4t#@.1....E..... .....A.o..W............
...i....
22:24:02.154910 IP smtpauth9.earthlink.net.smtp > 192.168.0.9.33920: P 243:413(170) ack 22 win 5792 <nop,nop,timestamp 4128478313 33556392>
E...t$@.1..-.E..... .....A.o..W.....<......
...i....250-elasmtp-curtail.atl.sa.earthlink.net Hello XXXXXX.com [96.238.217.131]
250-SIZE 14680064
250-PIPELINING
250-AUTH PLAIN LOGIN CRAM-MD5
250-STARTTLS
250 HELP

22:24:02.155891 IP 192.168.0.9.33920 > smtpauth9.earthlink.net.smtp: P 22:90(68) ack 413 win 250 <nop,nop,timestamp 33556496 4128478313>
E..xQS@.@..d... .E........W..A......N3.....
.......iMAIL FROM:<root@XXXXXX.com>
RCPT TO:<rgj@mindspring.com>
DATA

22:24:02.261942 IP smtpauth9.earthlink.net.smtp > 192.168.0.9.33920: P 413:621(208) ack 90 win 5792 <nop,nop,timestamp 4128478324 33556496>
E...t%@.1....E..... .....A....W......S.....
...t....250 OK
550 Message not sent - New domain not yet verified
503-All RCPT commands were rejected with this error:
503-Message not sent - New domain not yet verified
503 Valid RCPT command must precede DATA

22:24:02.283991 IP 192.168.0.9.33920 > smtpauth9.earthlink.net.smtp: P 90:102(12) ack 621 win 283 <nop,nop,timestamp 33556624 4128478324>
E..@QT@.@...... .E........W..A......M......
.......tRSET
QUIT

22:24:02.386764 IP smtpauth9.earthlink.net.smtp > 192.168.0.9.33920: P 621:696(75) ack 102 win 5792 <nop,nop,timestamp 4128478336 33556624>
E...t&@.1....E..... .....A....W............
........250 Reset OK
221 elasmtp-curtail.atl.sa.earthlink.net closing connection

22:24:02.387112 IP smtpauth9.earthlink.net.smtp > 192.168.0.9.33920: F 696:696(0) ack 102 win 5792 <nop,nop,timestamp 4128478336 33556624>
E..4t'@.1....E..... .....A.4..W............
........
22:24:02.387520 IP 192.168.0.9.33920 > smtpauth9.earthlink.net.smtp: F 102:102(0) ack 697 win 283 <nop,nop,timestamp 33556728 4128478336>
E..4QU@.@...... .E........W..A.5...........
........
22:24:02.441871 IP 192.168.0.9.54195 > smtpauth3.earthlink.net.smtp: S 4190306940:4190306940(0) win 5840 <mss 1460,sackOK,timestamp 33556782 0,nop,wscale 5>
E..<.R@.@...... .E.........|.........5.........
.. .........
22:24:02.488637 IP smtpauth9.earthlink.net.smtp > 192.168.0.9.33920: . ack 103 win 5792 <nop,nop,timestamp 4128478347 33556728>
E..4t(@.1....E..... .....A.5..W............
........
22:24:02.544140 IP smtpauth3.earthlink.net.smtp > 192.168.0.9.54195: S 558092869:558092869(0) ack 4190306941 win 5792 <mss 1412,sackOK,timestamp 4128994197 33556782,nop,wscale 0>
E..<..@.1....E..... ....!C.E...}.....N.........
..s... .....
22:24:02.544316 IP 192.168.0.9.54195 > smtpauth3.earthlink.net.smtp: . ack 1 win 183 <nop,nop,timestamp 33556885 4128994197>
E..4.S@.@...... .E.........}!C.F.....e.....
.. ...s.
22:24:02.654175 IP smtpauth3.earthlink.net.smtp > 192.168.0.9.54195: P 1:241(240) ack 1 win 5792 <nop,nop,timestamp 4128994208 33556885>
E..$..@.1.Y+.E..... ....!C.F...}.....s.....
..s... .220-elasmtp-kukur.atl.sa.earthlink.net ESMTP Exim 4.67 #1 Sat, 28 Jun 2008 01:26:32 -0400
220-NO UCE. EarthLink does not authorize the use of its computers or network
220 equipment to accept, transmit, or distribute unsolicited e-mail.

22:24:02.654325 IP 192.168.0.9.54195 > smtpauth3.earthlink.net.smtp: . ack 241 win 216 <nop,nop,timestamp 33556995 4128994208>
E..4.T@.@...... .E.........}!C.6...........
..
...s.
22:24:02.654863 IP 192.168.0.9.54195 > smtpauth3.earthlink.net.smtp: P 1:22(21) ack 241 win 216 <nop,nop,timestamp 33556995 4128994208>
E..I.U@.@...... .E.........}!C.6....M......
..
...s.EHLO XXXXXX.com

22:24:02.770077 IP smtpauth3.earthlink.net.smtp > 192.168.0.9.54195: . ack 22 win 5792 <nop,nop,timestamp 4128994219 33556995>
E..4..@.1.Z..E..... ....!C.6...............
..s...
.
22:24:02.771168 IP smtpauth3.earthlink.net.smtp > 192.168.0.9.54195: P 241:409(168) ack 22 win 5792 <nop,nop,timestamp 4128994219 33556995>
E.....@.1.Yq.E..... ....!C.6.........].....
..s...
.250-elasmtp-kukur.atl.sa.earthlink.net Hello XXXXXX.com [96.238.217.131]
250-SIZE 14680064
250-PIPELINING
250-AUTH PLAIN LOGIN CRAM-MD5
250-STARTTLS
250 HELP

22:24:02.772071 IP 192.168.0.9.54195 > smtpauth3.earthlink.net.smtp: P 22:72(50) ack 409 win 250 <nop,nop,timestamp 33557112 4128994219>
E..f.V@.@..y... .E..........!C......N......
..
x..s.MAIL FROM:<>
RCPT TO:<root@XXXXXX.com>
DATA

22:24:02.884008 IP smtpauth3.earthlink.net.smtp > 192.168.0.9.54195: P 409:617(208) ack 72 win 5792 <nop,nop,timestamp 4128994231 33557112>
E.....@.1.YH.E..... ....!C.................
..s...
x250 OK
550 Message not sent - New domain not yet verified
503-All RCPT commands were rejected with this error:
503-Message not sent - New domain not yet verified
503 Valid RCPT command must precede DATA

22:24:02.897327 IP 192.168.0.9.54195 > smtpauth3.earthlink.net.smtp: P 72:84(12) ack 617 win 283 <nop,nop,timestamp 33557238 4128994231>
E..@.W@.@...... .E..........!C......M......
..
...s.RSET
QUIT

22:24:03.019181 IP smtpauth3.earthlink.net.smtp > 192.168.0.9.54195: P 617:690(73) ack 84 win 5792 <nop,nop,timestamp 4128994243 33557238>
E..}..@.1.Y..E..... ....!C..........%......
..s...
.250 Reset OK
221 elasmtp-kukur.atl.sa.earthlink.net closing connection

22:24:03.019710 IP 192.168.0.9.54195 > smtpauth3.earthlink.net.smtp: F 84:84(0) ack 690 win 283 <nop,nop,timestamp 33557360 4128994243>
E..4.X@.@...... .E..........!C.............
...p..s.
22:24:03.019798 IP smtpauth3.earthlink.net.smtp > 192.168.0.9.54195: F 690:690(0) ack 84 win 5792 <nop,nop,timestamp 4128994243 33557238>
E..4..@.1.Z..E..... ....!C.................
..s...
.
22:24:03.019836 IP 192.168.0.9.54195 > smtpauth3.earthlink.net.smtp: . ack 691 win 283 <nop,nop,timestamp 33557360 4128994243>
E..4.Y@.@...... .E..........!C.............
...p..s.
22:24:03.138633 IP smtpauth3.earthlink.net.smtp > 192.168.0.9.54195: . ack 85 win 5792 <nop,nop,timestamp 4128994255 33557360>
E..4..@.1.Z..E..... ....!C...........a.....
..s....p

They offer STARTTLS; your postfix does not attempt to use tls.

Set smtp_tls_security_level appropriately for your situation.

I see on earthlink's support site they use the submission port 587. Did you configure kmail to smtp auth at port 587? If so, you'll need to do the same to your postfix relay.

Do I add that line to the main.cf file. Do I remove the sasl lines?

kmail is set to use port 25 and it works with 25. I did try the other port and got the same results.

I'm still not clear if you configured kmail to use TLS (probably a setting about requiring authentication.)

Earthlink's servers are offering:

250-AUTH PLAIN LOGIN CRAM-MD5

You don't want to use PLAIN without TLS, because your password is in cleartext. And LOGIN is for Outlook/Outlook Express clients. CRAM-MD5 is encypted, so TLS is not necessary. So how is your kmail connecting ?

Yes, they would be placed in main.cf. Leave the SASL lines if your kmail is likewise configured to use TLS/SASL as I mentioned above. You're trying to duplicate the same setup that works successfully in kmail.

Take a look at : http://www.postfix.org/SOHO_README.html

kmail is set up Encryption = none, Authentication method APOP.

APOP is for downloading, not sending.

No encryption! Yuck. Configure TLS, and use encryption. The Small Home Office README explains what is needed.

Note the auth part in the name in the mail server "smtpauth.earthlink.net". That suggests you should be using authentication.

But something doesn't make sense; when you test your kmail, you say it works by connection to port 25. Is the recipient of that email a remote domain, or one that Earthlink is final destination for ? A mail server will accept mail if it considers itself as final destination or a relay destination, but not if the recipient is some remote domain. So the question is, was the kmail test using the same recipient address as the postfix test?

When I connect to the same Earthlink server, I get the same error as you: the New domain not yet verified. This is apparently their response to recipient mail addresses that they don't consider theirs.

Trying 207.69.189.207...
Connected to smtpauth.earthlink.net.
Escape character is '^]'.
220-elasmtp-spurfowl.atl.sa.earthlink.net ESMTP Exim 4.67 #1 Sun, 29 Jun 2008 03:19:29 -0400
220-NO UCE. EarthLink does not authorize the use of its computers or network
220 equipment to accept, transmit, or distribute unsolicited e-mail.
EHLO XXX.com
250-elasmtp-spurfowl.atl.sa.earthlink.net Hello XXX.com [xxx.xxx.xxx.xxx]
250-SIZE 14680064
250-PIPELINING
250-AUTH PLAIN LOGIN CRAM-MD5
250-STARTTLS
250 HELP
MAIL FROM: root@xxx.com
250 OK
RCPT TO:<root@xxx.com>
550 Message not sent - New domain not yet verified
quit
221 elasmtp-spurfowl.atl.sa.earthlink.net closing connection
Connection closed by foreign host.

I gave you the settings for the incoming kmail.

The outgoing settings are

Encryption: TLS
Authentication Method: CRAM-MD5

It will work with either port 25 or port 587.






Below is the tcpdump log for a kmail send. Note the line with the statement "Authentication succeeded". The postfix log did not have that statement or one that said the authentication failed. So my guess is that postfix is not sending an authentication.



23:32:31.316946 IP 192.168.0.9.39086 > smtpauth6.earthlink.net.smtp: S 4194009802:4194009802(0) win 5840 <mss 1460,sackOK,timestamp 37665657 0,nop,wscale 5>
E..<9.@.@..C... .E...................'.........
.>.y........
23:32:31.420810 IP smtpauth6.earthlink.net.smtp > 192.168.0.9.39086: S 4267044336:4267044336(0) ack 4194009803 win 5792 <mss 1412,sackOK,timestamp 946007883 37665657,nop,wscale 0>
E..<..@.1....E..... .....U.....................
8b.K.>.y....
23:32:31.421007 IP 192.168.0.9.39086 > smtpauth6.earthlink.net.smtp: . ack 1 win 183 <nop,nop,timestamp 37665761 946007883>
E..49.@.@..J... .E...........U......@......
.>..8b.K
23:32:31.526441 IP smtpauth6.earthlink.net.smtp > 192.168.0.9.39086: P 1:244(243) ack 1 win 5792 <nop,nop,timestamp 946007894 37665761>
E..'..@.1..d.E..... .....U..........%......
8b.V.>..220-elasmtp-spurfowl.atl.sa.earthlink.net ESMTP Exim 4.67 #1 Sat, 28 Jun 2008 02:35:01 -0400
220-NO UCE. EarthLink does not authorize the use of its computers or network
220 equipment to accept, transmit, or distribute unsolicited e-mail.

23:32:31.526599 IP 192.168.0.9.39086 > smtpauth6.earthlink.net.smtp: . ack 244 win 216 <nop,nop,timestamp 37665867 946007894>
E..49.@.@..I... .E...........U......?......
.>.K8b.V
23:32:31.565783 IP 192.168.0.9.39086 > smtpauth6.earthlink.net.smtp: P 1:21(20) ack 244 win 216 <nop,nop,timestamp 37665906 946007894>
E..H9.@.@..4... .E...........U......N......
.>.r8b.VEHLO [192.168.0.9]

23:32:31.669932 IP smtpauth6.earthlink.net.smtp > 192.168.0.9.39086: . ack 21 win 5792 <nop,nop,timestamp 946007908 37665906>
E..4..@.1..V.E..... .....U..........)......
8b.d.>.r
23:32:31.670955 IP smtpauth6.earthlink.net.smtp > 192.168.0.9.39086: P 244:414(170) ack 21 win 5792 <nop,nop,timestamp 946007908 37665906>
E.....@.1....E..... .....U..........8......
8b.d.>.r250-elasmtp-spurfowl.atl.sa.earthlink.net Hello [192.168.0.9] [96.238.217.131]
250-SIZE 14680064
250-PIPELINING
250-AUTH PLAIN LOGIN CRAM-MD5
250-STARTTLS
250 HELP

23:32:31.673933 IP 192.168.0.9.39086 > smtpauth6.earthlink.net.smtp: P 21:36(15) ack 414 win 250 <nop,nop,timestamp 37666014 946007908>
E..C9.@.@..8... .E...........U......M......
.>..8b.dAUTH CRAM-MD5

23:32:31.778400 IP smtpauth6.earthlink.net.smtp > 192.168.0.9.39086: P 414:496(82) ack 36 win 5792 <nop,nop,timestamp 946007919 37666014>
E.....@.1....E..... .....U...........>.....
8b.o.>..334 PDcwMbmV0Pg==

23:32:31.779209 IP 192.168.0.9.39086 > smtpauth6.earthlink.net.smtp: P 36:118(82) ack 496 win 250 <nop,nop,timestamp 37666120 946007919>
E...9.@.@...... .E...........U......N>.....
.>.H8b.ob2ZDQw
23:32:31.887609 IP smtpauth6.earthlink.net.smtp > 192.168.0.9.39086: P 496:526(30) ack 118 win 5792 <nop,nop,timestamp 946007930 37666120>
E..R..@.1..5.E..... .....U.....@.....B.....
8b.z.>.H235 Authentication succeeded

23:32:31.919330 IP 192.168.0.9.39086 > smtpauth6.earthlink.net.smtp: P 118:203(85) ack 526 win 250 <nop,nop,timestamp 37666260 946007930>
E...9.@.@...... .E.........@.U......NA.....
.>..8b.zMAIL FROM:<XXXXXXXXXXX@mindspring.com> SIZE=349
RCPT TO:<XXX@mindspring.com>
DATA

23:32:32.027713 IP smtpauth6.earthlink.net.smtp > 192.168.0.9.39086: P 526:604(78) ack 203 win 5792 <nop,nop,timestamp 946007944 37666260>
E.....@.1....E..... .....U...........9.....
8b...>..250 OK
250 Accepted
354 Enter message, ending with "." on a line by itself

23:32:32.031142 IP 192.168.0.9.39086 > smtpauth6.earthlink.net.smtp: P 203:551(348) ack 604 win 250 <nop,nop,timestamp 37666372 946007944>
E...9.@.@...... .E...........U.L....OH.....
.>.D8b..From: XXX <XXXXXXXXXXX/mindspring.com>
To: XXX@mindspring.com
Subject: test
Date: Fri, 27 Jun 2008 23:32:28 -0700
User-Agent: KMail/1.9.9
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Message-Id: <200806272332.28734.XXXXXXXXXXX@mindspring.com>

test 48
.

23:32:32.173047 IP smtpauth6.earthlink.net.smtp > 192.168.0.9.39086: . ack 551 win 6432 <nop,nop,timestamp 946007959 37666372>
E..4..@.1..Q.E..... .....U.L....... !......
8b...>.D
23:32:32.216373 IP smtpauth6.earthlink.net.smtp > 192.168.0.9.39086: P 604:632(28) ack 551 win 6432 <nop,nop,timestamp 946007963 37666372>
E..P..@.1..4.E..... .....U.L....... .-.....
8b...>.D250 OK id=1KCU1W-0001pD-6g

23:32:32.224839 IP 192.168.0.9.39086 > smtpauth6.earthlink.net.smtp: P 551:557(6) ack 632 win 250 <nop,nop,timestamp 37666565 946007963>
E..:9.@.@..=... .E...........U.h....M......
.>..8b..QUIT

23:32:32.328732 IP smtpauth6.earthlink.net.smtp > 192.168.0.9.39086: . ack 557 win 6432 <nop,nop,timestamp 946007974 37666565>
E..4..@.1..O.E..... .....U.h....... ......
8b...>..
23:32:32.329183 IP smtpauth6.earthlink.net.smtp > 192.168.0.9.39086: P 632:694(62) ack 557 win 6432 <nop,nop,timestamp 946007974 37666565>
E..r..@.1....E..... .....U.h....... [......
8b...>..221 elasmtp-spurfowl.atl.sa.earthlink.net closing connection

23:32:32.329638 IP 192.168.0.9.39086 > smtpauth6.earthlink.net.smtp: F 557:557(0) ack 694 win 250 <nop,nop,timestamp 37666670 946007974>
E..49.@.@..B... .E...........U......7......
.>.n8b..
23:32:32.329942 IP smtpauth6.earthlink.net.smtp > 192.168.0.9.39086: F 694:694(0) ack 557 win 6432 <nop,nop,timestamp 946007974 37666565>
E..4..@.1..M.E..... .....U......... .......
8b...>..
23:32:32.329994 IP 192.168.0.9.39086 > smtpauth6.earthlink.net.smtp: . ack 695 win 250 <nop,nop,timestamp 37666670 946007974>
E..49.@.@..A... .E...........U......7......
.>.n8b..
23:32:32.432940 IP smtpauth6.earthlink.net.smtp > 192.168.0.9.39086: . ack 558 win 6432 <nop,nop,timestamp 946007984 37666670>
E..4..@.1..L.E..... .....U......... .^.....
8b...>.n

See the first top level threads:

http://groups.google.com/group/list....rch+this+group

Show log messages, not tcpdump output.

The problem was with the user name in the sasl_passwd file. My ISP id earthlink but my email address is with mindspring. So I must have the full email address in the password file.

Now if I could only get it to work on my Slackware 7 box.

Glad you found it. I believe the username appears in your logs, right? That's the first place to look for postfix troubles (vs. tcpdump - that's for exploration after the logs indicate deeper packet dumping is required).